Deny Admin role not usable?

Hi,

I’m trying to create a deny policy to protect specific datasets on bigquery marked with a tag.

However to create deny policies I need iam.denypolicies.createavailable only with the Deny Admin role.
However when I try to give myself the role it doesn’t show up. The role is enabled normally and I have the Security Admin role which allows me to setup all other policies.
Anyone else experiencing this and have a way to get around this issue ?

image531×373 19.5 KB

image460×512 28.2 KB

Hello @unitrium,

From your screenshot, it seems that you’re not allowed to edit the custom Role since the Edit Role button is disabled. I think that you may need to have roles/iam.roleAdmin as mentioned here. This role provides access to all custom roles in the project.

Security Admin seems limited concerning custom roles.